$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft File: LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json) Hash identifier: senuYDQI6CiLFVtC1C1rlnRy8b774mAaAtN3nPbIrAo= Subject key identifier: 94:84:79:2F:88:09:A5:2F:52:38:A6:7A:8A:52:D8:14:96:80:FE:DA Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D Certificate issuer: /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft Manifest number: 0150 Signing time: Sun 05 May 2024 05:02:22 +0000 Manifest this update: Sun 05 May 2024 05:02:21 +0000 Manifest next update: Sun 12 May 2024 05:02:21 +0000 Files and hashes: 1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: R3BaWRBKkdQ9iWsgVhoA3BSe28iL5naCYIn/4t6t0tU=) 2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: nasisBMYwJSZmLoM5QOPLrWdu70mhzrVZvVqWUm5F1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D Validity Not Before: May 5 05:02:21 2024 GMT Not After : May 12 05:02:21 2024 GMT Subject: CN=663712de-9421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:69:f0:4f:f6:24:13:0d:e7:70:3c:0b:07:93: e9:37:98:9c:9a:71:32:18:a7:43:0a:af:9a:83:c1: 57:8e:ee:81:bf:8b:f7:4c:26:0b:a9:60:25:0f:52: 79:31:23:09:f9:cd:1b:12:2c:64:a8:c2:5e:6a:c3: 58:b2:88:d2:27:70:80:f8:2d:93:ec:4b:23:fd:35: ea:c1:6a:cd:8a:e7:1d:88:7f:39:71:58:d3:8c:ac: 25:e5:b0:bd:a5:76:9e:48:ac:11:15:0c:15:f5:c1: dc:1f:90:c7:a6:9c:df:49:0c:33:d7:de:fe:71:63: d1:2d:b4:76:41:8f:42:00:cb:7a:47:bc:39:ae:b0: f4:e7:18:63:ae:86:4c:e9:dd:23:b3:50:a1:ac:c1: 29:b4:b1:92:82:3b:75:26:15:28:16:c3:5f:19:81: da:d4:a3:cf:5d:bf:e6:52:55:26:a3:b8:3c:1b:a7: 3a:90:7f:15:8f:37:b2:6b:fd:44:06:df:47:76:ab: 7a:2f:98:17:e9:2b:86:5c:0a:c9:57:41:fd:d0:55: 22:ec:60:0b:dd:cd:89:2b:37:27:19:a5:84:d9:dd: 38:5d:63:ef:58:b4:b9:7c:3e:6a:e8:bd:40:33:18: a0:b3:fe:93:1e:9c:0d:ae:fc:ca:04:6a:3d:10:7c: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:84:79:2F:88:09:A5:2F:52:38:A6:7A:8A:52:D8:14:96:80:FE:DA X509v3 Authority Key Identifier: keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:82:ec:49:31:2f:cc:5d:e0:dc:d5:ca:bb:10:93:b8:b7:d8: 57:c5:04:cd:5d:42:1d:1f:da:9c:52:8d:94:c0:44:ed:5c:bd: 1d:22:2b:23:24:56:b4:0d:dd:08:64:87:4a:5d:e1:69:4d:88: fb:01:07:5d:16:7b:ad:a5:97:d1:ae:fa:90:e6:48:49:bc:d6: a1:b4:96:63:dc:13:e0:52:15:90:f8:d0:32:3e:33:69:0a:cc: 56:1b:e2:f6:5f:15:4a:e2:46:a0:ea:fb:03:61:1f:eb:6c:17: 99:5c:31:a4:56:44:7e:db:17:11:a7:02:6b:6e:4b:6a:fc:30: 65:6a:cd:77:fd:51:89:92:5c:42:50:e0:a1:3b:66:8e:38:a0: 04:15:d9:7a:a0:3a:83:6b:ee:79:79:56:97:f3:ea:62:21:e6: 54:f0:8c:ba:c8:e3:74:65:b3:18:02:8a:cc:c5:bb:35:52:e0: bb:d9:c2:b0:77:96:4f:03:ac:0f:ab:ef:57:37:6a:fd:e3:f1: 08:45:63:1c:7d:43:06:ed:2b:0f:7d:40:c4:00:99:f8:84:db: 88:63:02:89:77:6a:b5:9b:93:ff:42:d7:63:be:1f:fc:25:1a: d3:51:98:3a:8e:4d:2c:ec:59:3a:3e:f2:2b:27:6b:98:5a:01: ae:79:c3:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQkMxMTAvBgNVBAUTKDJEM0EwQTIzQzU5QjRERjZEQkUwMUE0QzVGM0I3QzhC RkZGRjcwMEQwHhcNMjQwNTA1MDUwMjIxWhcNMjQwNTEyMDUwMjIxWjAYMRYwFAYD VQQDEw02NjM3MTJkZS05NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GnwT/YkEw3ncDwLB5PpN5icmnEyGKdDCq+ag8FXju6Bv4v3TCYLqWAlD1J5 MSMJ+c0bEixkqMJeasNYsojSJ3CA+C2T7Esj/TXqwWrNiucdiH85cVjTjKwl5bC9 pXaeSKwRFQwV9cHcH5DHppzfSQwz197+cWPRLbR2QY9CAMt6R7w5rrD05xhjroZM 6d0js1ChrMEptLGSgjt1JhUoFsNfGYHa1KPPXb/mUlUmo7g8G6c6kH8Vjzeya/1E Bt9Hdqt6L5gX6SuGXArJV0H90FUi7GAL3c2JKzcnGaWE2d04XWPvWLS5fD5q6L1A Mxigs/6THpwNrvzKBGo9EHz4QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSEeS+I CaUvUjimeopS2BSWgP7aMB8GA1UdIwQYMBaAFC06CiPFm0322+AaTF87fIv//3AN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCQy8yMDI0QjQ0ODM0 QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRmYmI0QnBNWHp0OGlfX19j QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUb0tJOFdiVGZiYjRCcE1YenQ4aV9fX2NBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCQy8yMDI0QjQ0ODM0QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRm YmI0QnBNWHp0OGlfX19jQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOguxJMS/MXeDc1cq7EJO4t9hXxQTNXUIdH9qcUo2UwETtXL0dIisj JFa0Dd0IZIdKXeFpTYj7AQddFnutpZfRrvqQ5khJvNahtJZj3BPgUhWQ+NAyPjNp CsxWG+L2XxVK4kag6vsDYR/rbBeZXDGkVkR+2xcRpwJrbktq/DBlas13/VGJklxC UOChO2aOOKAEFdl6oDqDa+55eVaX8+piIeZU8Iy6yON0ZbMYAorMxbs1UuC72cKw d5ZPA6wPq+9XN2r94/EIRWMcfUMG7SsPfUDEAJn4hNuIYwKJd2q1m5P/Qtdjvh/8 JRrTUZg6jk0s7Fk6PvIrJ2uYWgGuecPv -----END CERTIFICATE-----Generated at Sun May 5 06:01:17 2024 by rpki-client on console-fra.rpki-client.org